In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you about how we will process the personal data you provide to us through our website. We also inform you of our data protection policy, so that you can freely and voluntarily decide whether to provide us with your data when you continue browsing.
1. WHO ARE THE DATA CONTROLLERS?
|
Da BRUNO A CASA, S.L. (Da Bruno A Casa) |
|
|
ESPLIEGO INVERSIONES, S.L. (Da Bruno Sul Mare) |
|
|
DA BRUNO EXPRESS, S.L. |
|
-
Contact details:
E-mail: compliance@dabrunoacasa.com
2. FOR WHAT PURPOSE DO WE PROCESS YOUR DATA AND WHAT IS THE LEGAL BASIS?
The data you provide will be processed for the following purposes, in accordance with the legal bases indicated for each case:
-
Handling queries and sending requested information: respond to your inquiries and send you the information requested through the website’s contact form. The legal basis is your consent.
-
Management of the exercise of rights: to respond to requests related to the exercise of rights recognized by data protection regulations. The basis for this is our compliance with legal obligations.
In compliance with these obligations, we may share your data with public authorities and courts, provided that such information is required pursuant to established legal processes.
-
The basis of legitimacy is the consent givenReception of resumes: when you send us your resume, You authorize us to analyze the data and documents it contains. The basis of legitimacy is the consent given.
-
Reservation and order management: Processing your reservation requests or orders placed through our authorized channels. The legal basis is your consent.
-
Participation in promotions and raffles: management of your participation in raffles, contests, or organized promotions. The basis for legitimacy is the consent you give us at the time of registration.
-
Sending commercial communications: If you expressly authorize us, we may send you information about our services, news and newsletters, through electronic means. The basis of legitimacy is the consent given.
3. HOW LONG DO WE KEEP YOUR DATA?
The data you provide will be retained as long as there is a mutual interest in maintaining the purpose of the processing. It will be blocked when it is no longer necessary for the purpose for which it was collected or when you have exercised your right to erasure, cancellation, and/or restriction of processing.
After this period, they will be blocked and retained only for the legally established periods to address potential liabilities.
In particular:
-
Resumes: Retained for a maximum of one year, unless expressly stated otherwise.
-
Tax documentation: Four years in accordance with Article 66 et seq. of the General Tax Law.
-
Accounting books and invoices: Six years according to article 30 of the Commercial Code.
They will be at the exclusive disposal of Judges and Courts, the Public Prosecutor’s Office, and the competent Administrations, particularly the Data Protection Authority, for the purpose of addressing liabilities arising from processing, during the statute of limitations for such liabilities.
Once the indicated period has elapsed, the data will be destroyed using appropriate security measures to ensure pseudonymization or complete destruction.
4. WHAT ARE YOUR RIGHTS?
You have the right to exercise, at any time, the following rights recognized by data protection regulations:
-
Right of access: Know what personal data we process about you.
-
Right to rectification: Request correction of inaccurate or incomplete data.
-
Right to erasure: Request the deletion of your data when it is no longer necessary.
-
Right of limitation: Restrict the processing of your data in certain cases.
-
Right to object: Oppose the processing of your data, especially in the case of commercial communications.
-
Right to portability: Receive your data in a structured and commonly used format.
-
Right to revoke consent: Withdraw your consent at any time.
To exercise these rights, you must submit a specific request, along with a copy of your valid ID or equivalent identification document, through the following means:
-
EMAIL addressed to the address compliance@dabrunoacasa.com with subject Data Protection. This submission must be made from the email address you provided on the form. Otherwise, your details will not be shown to you, as your identity has not been sufficiently verified.
-
BY MAIL: Addressed to the address: Av Ricardo Soriano 18, Oficina 10, 29602 Marbella
-
If you do not receive a timely response from us or find it unsatisfactory to your request, we inform you that the competent supervisory authority is the Spanish Data Protection Agency. (www.aepd.es ). On their website you can find a series of models that will help you exercise your rights.
5. NO TRANSFER OF DATA
Your personal data will not be disclosed to third parties unless legally required or when you have given your express, informed, and unequivocal consent.
6. SECURITY MEASURES
At Da Bruno Marbella we deliver with current regulations on the protection of personal data (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights). We process personal data under our responsibility in accordance with the principles established in Article 5 of the GDPR, ensuring that they are processed lawfully, fairly, and transparently in relation to the data subject, and that they are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
We employ service providers with whom we have signed the corresponding data processing contracts that regulate their processing of personal data, subject to the limitations established by law.
We have implemented appropriate technical and organizational policies to protect your rights and freedoms, providing you with all the necessary information so you can exercise your rights. However, you should be aware that Internet security measures are not infallible.
7. MINORS
Children under 14 years of age may not use the services available through the website without the prior authorization of their parents, guardians, or legal representatives. Parents, guardians, or legal representatives will be solely responsible for all actions carried out through the website by minors in their care. This includes completing forms with the minors’ personal information and checking the corresponding boxes, where applicable. At Da Bruno Marbella, we are not responsible for the truthfulness and accuracy of the data provided.
The processing of personal data of a minor may only be based on their consent if they are over fourteen years of age. Exceptions are made in cases where the law requires the assistance of the holders of parental authority or guardianship for the execution of the legal act or transaction in the context of which consent for processing is obtained.
The processing of data of minors under the age of fourteen, based on consent, will only be lawful if the consent of the holder of parental authority or guardianship is obtained.
8. DURATION AND MODIFICATION OF THE PRIVACY POLICY
At Da Bruno Marbella, we reserve the right to modify this Privacy Policy, in whole or in part, by publishing the changes on our website. We may also change, delete, or add, without prior notice, both the content and services provided, as well as the way they are presented. Therefore, the Policies published at the time of your access will be considered valid, so we recommend that you read them periodically.
Notwithstanding the foregoing, we may terminate, suspend, or interrupt access to the website content at any time and without prior notice, without the User being able to claim any compensation.
